{"id":"CVE-2022-2884","url":"https://www.cyber-defence.io/tools/cve/CVE-2022-2884","generatedAt":"2026-11-04T23:59:57.038Z","title":"A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint","description":"A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to achieve remote code execution via the Import from GitHub API endpoint","published":"2022-10-17T16:15:21.000Z","lastModified":"2026-06-17T04:42:46.000Z","status":"Modified","sourceIdentifier":"cve@gitlab.com","cvss":{"version":"3.1","score":9.9,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["gitlab/gitlab"],"epss":{"score":0.7618,"percentile":0.99535,"date":"2026-11-03","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2023-04-01","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":51181,"kind":"exploit","title":"GitLab v15.3 - Remote Code Execution (RCE) (Authenticated)","url":"https://www.exploit-db.com/exploits/51181","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/ruby/webapps/51181.py","file":"exploits/ruby/webapps/51181.py","published":"2023-04-01","added":"2023-04-01","updated":"2023-06-06","author":"Antonio Francesco Sardella","type":"webapps","platform":"ruby","port":null,"verified":true,"codes":["CVE-2022-2884"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 76.2%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.html","source":"cve@gitlab.com"},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2884.json","tags":["Third Party Advisory"],"source":"cve@gitlab.com"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/371098","tags":["Third Party Advisory"],"source":"cve@gitlab.com"},{"url":"https://hackerone.com/reports/1672388","tags":["Permissions Required","Third Party Advisory"],"source":"cve@gitlab.com"},{"url":"http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2884.json","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/371098","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hackerone.com/reports/1672388","tags":["Permissions Required","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-2884","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}